HackingManufacturingManufacturingPhishingStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)CredentialsLowContained

Nidec Motor Corporation

bd_a55fa2922bb9117b · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 5, 2018

Filed

Jun 11, 2019

To disclose

31 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Nidec Motor Corporation →4 incidents on file

Nidec Motor Corporation notified the NH AG of unauthorized access to employee email accounts between June 16 and Nov 1, 2018. Discovered Nov 5, 2018. Two NH residents affected (names, usernames, passwords). Incident likely caused by phishing. Nidec engaged forensic investigators, reset passwords, enabled MFA, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 142 days

discovery → filing · 31 weeks / 218 days

Jun 16, 2018

Begins

Nov 5, 2018

Discovered

Jun 11, 2019

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_7c6d6ae969f34f5a2019-06-07 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Nidec Motor Corporation
norm: nidec motor
Domain: nidec.com
Industry: Manufacturingllm

Discovered: Nov 5, 2018
Breach occurred: Jun 16, 2018 – Nov 1, 2018
Undetected for: 142 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 7, 2019
Affected individuals: 2state-resident count only
Data types: Identity (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Initiated a privileged third-party forensic investigation
Secured the compromised accounts by updating passwords
Enabled Multi-Factor Authentication on the impacted accounts
Thoroughly scanned computers using multiple anti-malware products
Reviewed accounts to ensure that no unauthorized rules were in place
Reviewed geolocation of incoming connections to identify and block malicious IP addresses
Changes made: Providing potentially affected individuals access to 12 months of credit monitoring and identity restoration services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(218 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 7 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nidec-motor-20190611.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 11, 2019
Raw hash: 139399896cd4e858b5b826efae9eb2966433b7633343038c6e0a83aa2a7568dd

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityNidec Motor Corporation

Incidentdiscovered Nov 5, 2018

Stated responseInitiated a privileged third-party forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov